Manifest

$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
File:                     9rpgBVyyum_cmnX99hk3GwBVk84.mft (raw, json)
Hash identifier:          4Zq+pCwcuWfKze0qL/DiKvXgjXh2871MJpetlUchNmk=
Subject key identifier:   55:43:BE:48:B4:77:09:21:C4:F0:30:15:27:7C:0B:AD:BD:EA:D1:29
Authority key identifier: F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE
Certificate issuer:       /CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
Certificate serial:       01977CB0F81D3AEFD3E2EC051B04CF41B97D
Authority info access:    rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
Subject info access:      rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
Manifest number:          069E
Signing time:             Tue 17 Jun 2025 07:01:01 +0000
Manifest this update:     Tue 17 Jun 2025 07:01:01 +0000
Manifest next update:     Wed 18 Jun 2025 07:01:01 +0000
Files and hashes:         1: 9rpgBVyyum_cmnX99hk3GwBVk84.crl (hash: eW5VSNOfxTzlQvrbjBH+q6d0+A0yHz4xCtpmr1Qrbic=)
Validation:               OK
Signature path:           rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft
                          rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
                          rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
                          rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
                          rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
                          rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
                          rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
                          rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires:   Tue 17 Jun 2025 23:00:17 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:97:7c:b0:f8:1d:3a:ef:d3:e2:ec:05:1b:04:cf:41:b9:7d
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=f6ba60055cb2ba6fdc9a75fdf619371b005593ce
        Validity
            Not Before: Jun 17 07:01:01 2025 GMT
            Not After : Jun 18 07:01:01 2025 GMT
        Subject: CN=5543be48b4770921c4f03015277c0badbdead129
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:b1:c0:86:5c:0d:ef:63:40:77:bb:e5:f6:c0:f6:
                    1b:54:36:ca:5c:b8:10:25:1a:c5:26:63:cf:f4:28:
                    17:1c:13:2b:c3:a3:a1:dc:e3:5f:a8:8c:7a:76:10:
                    b4:07:dc:be:cb:04:7d:9a:b6:63:f6:55:19:84:ae:
                    52:8c:f0:7a:15:bf:a3:4b:8f:71:e6:7a:3f:66:9e:
                    7c:60:69:f6:e2:13:dd:a0:e7:41:c2:a5:5b:4b:4d:
                    19:2d:0f:98:d7:fa:1c:4e:ad:01:9c:e5:bb:a4:11:
                    74:d0:ba:0a:b2:59:65:cf:52:3f:7b:51:c4:52:c2:
                    d2:2c:01:d4:3b:e2:f6:d6:5d:ca:9f:07:f1:8b:17:
                    75:4f:cd:67:d7:62:d1:2e:15:fc:e5:86:e9:da:7b:
                    9e:c5:c4:70:dc:36:97:f2:b7:5c:ae:a3:00:2a:09:
                    43:1d:16:63:fe:93:71:a3:8a:55:7d:d5:e6:d9:d1:
                    80:73:63:34:4a:27:e0:b4:b7:3a:6a:44:ce:59:da:
                    c1:d6:10:9c:a0:6a:1b:bc:04:cc:3c:80:7c:9e:fb:
                    07:41:a8:48:0e:9d:0b:cf:9b:e2:af:95:ed:db:14:
                    4f:bb:f1:f0:f6:59:b4:57:af:d5:9b:5e:c1:41:e1:
                    1f:bf:18:91:f2:74:9e:29:6f:78:50:f4:1b:11:4b:
                    6b:5b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                55:43:BE:48:B4:77:09:21:C4:F0:30:15:27:7C:0B:AD:BD:EA:D1:29
            X509v3 Authority Key Identifier:
                keyid:F6:BA:60:05:5C:B2:BA:6F:DC:9A:75:FD:F6:19:37:1B:00:55:93:CE

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/9rpgBVyyum_cmnX99hk3GwBVk84.cer

            Subject Information Access:
                Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.mft

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.ripe.net/repository/DEFAULT/7e/6a6459-2320-4534-a926-4f9d988bd1d3/1/9rpgBVyyum_cmnX99hk3GwBVk84.crl

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

    Signature Algorithm: sha256WithRSAEncryption
         c9:74:a4:4e:e5:06:c1:06:9b:be:78:11:b2:68:a3:1a:ea:16:
         33:33:7d:b5:20:4d:f7:af:68:24:75:3b:21:bf:15:76:5c:38:
         9b:20:83:c1:3b:9b:71:da:db:f3:d6:1b:3e:6c:55:87:e6:db:
         ac:dd:be:c9:36:25:e2:54:cf:24:8e:53:96:90:22:f7:8c:30:
         b9:d4:89:58:d0:e9:92:0d:8b:36:f6:df:ab:8a:c4:ff:01:41:
         c7:08:06:79:f2:ea:b5:9d:c2:32:ed:23:c4:f5:7d:5a:fc:49:
         34:ec:9d:36:73:6c:fc:2d:da:cf:20:8b:81:01:c2:8d:a7:73:
         8f:ff:82:ac:e3:c0:9c:2a:15:16:2c:20:cd:b8:7e:9d:af:e0:
         52:4b:00:df:9d:6d:97:45:45:ba:27:97:b2:43:21:4b:89:6e:
         2d:a5:b2:c2:24:81:63:93:6b:9c:11:4b:62:d7:42:9e:2a:9b:
         34:f6:d1:dd:2f:08:fd:d2:27:0b:74:b0:9e:99:ea:d0:21:1b:
         60:aa:a2:0d:54:9f:01:52:42:00:dd:76:5e:fb:9b:e9:2c:75:
         b5:05:b9:13:52:ad:66:ad:e7:ea:27:5f:73:78:99:42:1f:10:
         b5:07:b1:66:b1:c9:75:3b:8b:88:92:fa:40:54:47:72:f0:a1:
         cf:7e:e2:4a
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Tue Jun 17 09:00:35 2025 by rpki-client